
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/10F1A0582B8511EEA7FF697BC4F9AE02.roa
File: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (raw, json)
Hash identifier: moXXvJLFKkIqyJw20Q1OuyiRN76hq8AL96LMv4bv4WY=
Subject key identifier: E6:30:A0:0E:C2:2C:78:0A:BD:23:40:7B:FD:D4:74:64:DB:03:B7:1E
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 01F0
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/10F1A0582B8511EEA7FF697BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:35:26 +0000
ROA not before: Wed 07 May 2025 03:41:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134829
IP address blocks: 103.186.86.0/24 maxlen: 24
103.186.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: May 7 03:41:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3ec3e-f9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:73:7e:0a:c7:3a:b9:11:09:a3:8d:be:c2:
c7:1d:b5:ae:cd:dc:49:9e:3f:f1:5f:09:e7:30:64:
60:d0:04:50:fc:ce:87:c6:66:71:0e:51:ce:6a:21:
f6:4d:90:bc:6b:6a:a5:3f:5b:8a:3e:2d:ef:88:55:
7a:f0:66:fd:7c:52:b9:db:2c:27:ed:30:42:8f:d2:
72:c8:ae:69:13:af:ff:7d:94:4a:50:39:12:d0:72:
70:aa:d7:2a:e7:1f:1b:63:9d:2f:ac:4c:c7:3c:b7:
3b:bc:5d:48:ac:1c:0f:a0:ce:c9:8e:44:fa:36:a2:
f1:b8:d9:f4:d2:1a:02:a6:ae:e2:34:63:24:03:80:
83:9f:1c:fa:02:fc:14:ce:31:ef:8e:3a:a5:6a:40:
dc:f3:db:27:96:50:2d:e2:1b:d6:de:06:ae:d4:ab:
1b:10:e4:f4:26:a3:c9:de:d6:9e:82:3b:82:70:ff:
a6:59:d9:65:0d:b0:52:a0:0f:5c:8d:16:f7:13:de:
16:c9:04:25:cd:b0:5e:28:7a:be:dd:ca:15:c5:51:
9f:b3:47:a1:ad:9f:d6:f4:db:69:a4:18:c2:78:68:
ef:a0:04:7b:19:57:de:7e:ca:ed:fb:6a:5e:72:0f:
5f:d4:c3:1f:0c:da:0c:71:f0:be:d2:a9:83:c0:40:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:A0:0E:C2:2C:78:0A:BD:23:40:7B:FD:D4:74:64:DB:03:B7:1E
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/10F1A0582B8511EEA7FF697BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f9:8f:b1:b1:3d:76:b2:e1:6e:9b:6e:5f:1a:13:16:0b:c8:
a2:2b:38:c5:20:38:19:8b:a1:c6:36:3e:f7:73:7f:42:2e:f9:
2c:5f:fe:92:28:bc:e9:08:1c:27:75:54:40:8c:d8:19:e9:67:
be:38:d4:a1:2f:fb:1c:70:2f:5e:fd:4e:cb:01:e2:ff:5a:09:
bf:a8:71:6c:3e:0d:6b:f6:09:17:6e:d0:de:97:b5:89:ca:b9:
39:9e:0f:a1:2f:29:99:07:b2:f2:74:66:0b:28:75:f4:fb:a5:
b6:24:76:ea:ff:2c:de:45:be:5a:7b:36:e3:75:8d:03:00:08:
1f:d8:4a:b8:bb:41:8e:34:42:95:b6:b5:63:5d:fe:23:2e:2b:
eb:3d:a5:ab:37:63:0b:1b:61:af:94:5d:28:10:3c:99:e0:c4:
cc:9c:96:c4:7c:1e:8b:43:b2:e3:ed:49:6e:4e:8a:8a:b6:97:
6f:00:5b:91:af:25:bb:55:f1:db:e4:91:e6:5a:74:f7:8f:ad:
ba:96:ee:61:05:66:53:27:82:a2:72:e8:6f:f4:91:9c:6c:23:
33:50:67:18:01:dd:cf:55:93:c3:06:fa:d3:e6:8f:2d:f8:dd:
a5:fa:39:e3:78:8d:6b:e3:be:32:d0:1d:52:52:50:f6:3f:ef:
e1:d6:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:15 2026 by rpki-client